memo to :

ABC, Inc. has hired you as an external Security Auditor to observe its control environment. During your audit you observed the following deficiencies:

Terminated users still have enabled accounts on the network.

Multiple users have their passwords written down on sticky notes attached to their monitors.

All passwords appear to be simple passwords such as smith.

An employee in the IT department was able to see Payroll files found in an Accounting Department folder.

Servers and other critical networking devices were kept in unlocked rooms.

As the auditor, draft a memo to Mr. Robert Jones, the IT Administrator of ABC, Inc. explaining why each of these observations is a deficiency and suggest how the deficiency could be corrected and added to the companys security policy.